Malicious code in solidity-testing-utils (npm)

Source: amazon-inspector 7a7ffd7dfab8f1c168ceb5ae9b26f4221e912d2a444afe029b83b1f214cf3bd8 Package presents itself as a chai/solidity testing helper and pino-style logger, but its exported middleware factory in index.js silently spawns lib/caller.js via childprocess.spawn'node', ..., detached: tru...